View user detail

The CMC User Detail dashboard provides comprehensive information to Splunk Cloud Platform administrators about the activities of a specific user in your Splunk Cloud Platform deployment. Use this dashboard to investigate a user, particularly their searches and pageviews.

Review the User Detail dashboard

This dashboard contains 10 panels of summary, graphical, and tabular data about a specific user of your Splunk Cloud Platform deployment. Filter the results by specifying a time range.

To investigate your panels, go to Cloud Monitoring Console > Usage > User Detail. Use the following table to understand the dashboard interface.

Panel or Filter Description
User and Time Range Select a user and time range to populate the dashboard.

Note: When you view this dashboard, the User field is automatically populated with the first menu value. Be sure to change this default value to the user you are investigating.
Name Shows the user's full name as defined in their user profile.
Username Shows the user's system name, which may be formatted as an email account.
Roles assigned to <user> Shows the user's roles as assigned in Settings > Users and Authentication > Roles.
User Logins Shows the number of times the user has logged into the deployment.
Search Count Shows the number of searches the user has done.
Average Search Runtime Shows the average runtime of all searches performed.
Total Search Time Shows the total of the combined runtimes for all the user's searches.
Searches by Type Provides a bar chart of the types of searches the user performed over time, such as ad hoc.
Pageviews by App Provides a bar chart of pageviews, color-coded by app.
User Search Detail Provides detailed information for each search done by the user, such as its type, start and run times, and host and search identifiers.

Interpret user detail results

When interpreting your user detail results, note the following:

  • Especially for new deployments, use this dashboard to monitor usage and determine if your users are adopting or rejecting the Splunk platform. A downward trend may indicate users need more training, or that there are other issues that require investigation and resolution.
  • Check if the values in the second row of panels (Search Count, Average Search Runtime, and Total Search Time) increase significantly over time. Depending on the user's role and responsibilities, this may indicate behavior that needs further investigation.
  • Analyze if the Searches by Type and Pageviews by App graphs reveal any patterns of behavior that could be optimized.